SENIOR INFORMATION ASSURANCE MANAGER (SC Cleared)

Job Introduction

We are currently recruiting for Senior Information Assurance Manager on a Full Time, Permanent basis to join our IS&T team within our Service Operations segment.  This role is based from our office in Salford Quays/Media City.

The successful individual will be responsible for the management of Information Assurance with regard to the business objectives set out by Sodexo UK and ROI; providing data management leadership, advice, support and guidance to all levels of the organisation.  They will ensure through proactive and reactive tasks, that information security risks to the business are mitigated, and where possible reduced by continual improvement of the Sodexo UK and ROI Information Security Management System.

Role Responsibility

• Drive the Information Assurance programme for activities at up to IL3/Official Sensitive for HMG clients

• Work directly with senior management and external bodies to grow a culture of quality, prevention, protection and compliance that is driven by effective leadership and accountability; Develop and manage the Information Security Working Group and associated ISMS Forums.
• Support multiple project engagements providing estimation, planning and tracking of security requirements.
• Be a recognised subject matter expert for ISO27001 and PCI-DSS Accreditation
• Support ITT / PQQ and contract bid opportunities through customer facing engagement and the completion of security questionnaires.
• Develop, implement and maintain information security policies, standards, guidelines and procedures, ensuring on-going achievement of information security objectives based on Industry best practice.
• Develop, implement and maintain Information Assurance Accreditations in line with business strategy, global standards and policies, and the requirements of audit bodies and Clients (including National Security Standards, HMG Security Policy Framework (SPF) and Defence Manual of Security (JSP440) etc).
• Create security documentation in accordance with appropriate standards (e.g. JSP440, HMG National Security Standards and guidelines (HMG IAS1-2, etc.), SPF, ISO 27001) including Technical Risk Assessment, RMADS, SyOps and Codes of Connection.
• Deliver legislative update training programmes
• Support the definition, delivery and management of the ICT Business Continuity Management System to ISO 22301 and the requirements of the Corporate BCMS.

The Ideal Candidate

• Will be regarded as an Information Security Subject Matter Expert and act as a champion for information security best practice; they are able to sensitively articulate the link between information security, risk management and tangible business advantage, in uncluttered language.
• CESG Certified Professional (CCP) in one or more role at practitioner level
• Qualified to one of : CISSP; CISM; and / or CLAS membership
• Excellent communication & influencing skills; able to demonstrate successful engagement with HMG Accreditors
• Customer-focused, acting as an ambassador with all security stakeholders and able to engage with internal and external clients, in both the public and private sector.
• Ability to work to work collaboratively, as well as develop, coach and mentor other colleagues and team members
• Must have a current SC clearance, or be able and willing to achieve clearance to work on systems at “Official” status

Package Description

Competitive Salary - Band B - 23 days holiday + discretionary 15% bonus + £1,300 contribution to the Sodexo Flexible Benefits Scheme + Pension + Childcare Vouchers

About the Company

Sodexo UK & Ireland employs around 36,000 people and delivers On-site Service Solutions to clients at over 2,300 locations including offices, hospitals, schools, defense sites, prisons, sporting events and visitor attractions.  With an annual turnover of over £1bn, Sodexo delivers a diverse range of services from catering, cleaning, reception to security, laboratory and grounds maintenance services, enabling clients to focus on their core business.

We are building on our support to the Armed Forces community through the development of specific pathways within our recruitment process to further engage ex-forces personnel and reservists.  Those applying for roles with us who meet the essential criteria advertised under the ‘ideal candidate’ on the vacancy advertised, are guaranteed to progress within the selection process.

Sodexo and our clients are committed to safeguarding and promoting the welfare of children and adults within a regulated activity. Certain roles will require applicants to undergo screening appropriate to the post, including checks with past employers and the Disclosure and Barring Service (DBS) and/ or Disclosure Scotland.